Tag: cpanel
42 articles
Industry reports
Hosting’s Next Six Months Are Already Scheduled: Five Dates to Prepare For
CRA reporting, the licensing season, the Sedo window, the .com increase and the end of egress fees: the deadlines ahead, and what to do before each.
Security
Two of cPanel’s Three New Flaws Cross the Line Between Accounts
cPanel's July 29 patch fixes three flaws. Two cross the boundary between accounts on a shared server, one without any login at all.
Security
A Malware Campaign Is Using GitHub Actions to Hunt Unpatched cPanel Servers
A new campaign uses GitHub's own build servers to hunt cPanel and WHM servers still exposed to CVE-2026-41940, and steal their secrets.
Expert's Voice
The Hosting Price Squeeze, Part 1: Why Your Costs Keep Climbing
Energy, hardware, consolidation, and per-account licensing are squeezing hosting margins at once. A veteran founder breaks down what is really driving the rise.
Security
Roundcube’s Zero-Click Webmail XSS, and How Fast It Reached cPanel
Roundcube's zero-click webmail XSS (CVSS 7.2) was patched July 5 and shipped in cPanel 134.0.45 on July 14. Here is what shared hosts should check.
Security
The Exploit Record: How Government Networks Keep Getting Breached
A cPanel zero-day hit Guam. CISA got breached through Ivanti. Salt Typhoon accessed US wiretap systems. The case file of government breaches.
Security
CVE-2026-48172: LiteSpeed cPanel Plugin Root Privilege Escalation, CVSS 10.0, Actively Exploited
LiteSpeed cPanel Plugin CVE-2026-48172 (CVSS 10.0) lets any cPanel user execute scripts as root. Actively exploited. Patch to 2.4.7 now.
Security
Skynethosting Took Its Entire cPanel Fleet Offline on May 1. Two Weeks Later, Some Are Still Down.
Skynethosting took its entire cPanel fleet offline on May 1 in response to CVE-2026-41940, and as of May 14 some customer servers had been down for nearly two weeks, with one reseller publicly reporting a 30 percent client loss during the outage.
Security
cPanel Patched Five More CVEs. One Fix Is Already Reported Incomplete.
cPanel's May 13 patch covers five new CVEs, but security researcher Shubham Shah reported within hours that the fix for CVE-2026-29205 is incomplete and all cPanel instances remain exploitable until a working patch lands.
Security
Three cPanel Patches and DirtyFrag Fixes in One Day. Here Is Where Things Stand.
Three cPanel patches and Linux kernel fixes for DirtyFrag landed on May 8. Here is what got fixed and what to verify with your hosting provider.
Reach hosting professionals
Sponsor webhosting.today and get in front of hosting buyers, founders and engineers.
50k+monthly readers
763articles